Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/joqpwMIl7fWDDNBVxnlcVC-MgCg.roa
File:                     joqpwMIl7fWDDNBVxnlcVC-MgCg.roa (raw, json)
Hash identifier:          p9OyJ7J8BN8ZKy/ObZxQTYt9AEKDayswZdQyNukhKTE=
Subject key identifier:   8E:8A:A9:C0:C2:25:ED:F5:83:0C:D0:55:C6:79:5C:54:2F:8C:80:28
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       014E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/joqpwMIl7fWDDNBVxnlcVC-MgCg.roa
Signing time:             Tue 30 May 2023 17:32:25 +0000
ROA not before:           Tue 30 May 2023 17:32:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8E8AA9C0C225EDF5830CD055C6795C542F8C8028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:d5:a4:dc:8a:9d:04:b7:e1:20:da:73:c4:
                    34:a5:f3:dd:b4:c6:94:ea:09:2c:e4:36:82:04:ac:
                    9e:58:2e:fa:5f:fd:4e:2b:d0:15:36:91:9a:89:39:
                    31:8d:8d:8f:19:a7:af:5e:1d:69:b1:1c:22:75:ef:
                    eb:6c:d7:2b:91:15:8d:6a:01:7f:0d:b0:2d:d0:f5:
                    ec:6c:fe:06:27:e8:c4:45:0d:8e:63:64:97:80:f4:
                    5e:cc:f9:9d:21:29:89:52:f3:a9:3a:a5:50:ac:40:
                    36:0a:b9:56:54:de:de:72:55:14:d4:22:1f:ec:4d:
                    61:7a:0a:7e:58:5c:ab:1c:ae:1a:09:76:ba:46:7d:
                    c7:e2:f0:30:2d:e0:7e:57:ab:09:46:67:3d:d9:c2:
                    93:6b:04:74:a4:08:65:b3:fc:63:06:7d:c8:cd:23:
                    ad:6b:42:68:7c:30:05:5d:6b:c5:75:4a:f1:36:94:
                    de:45:df:6b:07:27:76:b4:90:9a:e6:6e:b4:31:6b:
                    b9:a2:f7:91:5f:14:43:9d:50:69:b3:5c:d7:86:27:
                    3d:30:1e:79:90:54:de:77:19:73:cb:2f:a4:e7:05:
                    02:b2:ee:d8:23:b3:33:1a:79:59:fc:3c:53:fc:a7:
                    36:d0:32:03:4f:1a:db:5b:e6:b9:36:1c:70:99:38:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8A:A9:C0:C2:25:ED:F5:83:0C:D0:55:C6:79:5C:54:2F:8C:80:28
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/joqpwMIl7fWDDNBVxnlcVC-MgCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:3f:13:40:db:d5:a0:fb:c2:ec:6c:52:f8:cb:54:73:28:
         33:f9:56:dd:0f:64:79:cb:7b:a8:28:57:2e:eb:c8:b3:d4:17:
         aa:85:11:ad:85:15:88:bc:e5:7e:76:d6:6f:43:75:55:a7:66:
         8f:7d:25:d3:41:33:9e:77:46:8f:4f:a7:d8:c2:6f:dd:70:0f:
         62:4a:91:3a:6c:0b:87:10:ab:eb:e0:60:4e:b8:08:26:48:23:
         e1:eb:c2:07:86:6e:d9:17:35:18:44:88:23:e0:70:d3:b4:bd:
         b9:d2:b9:cf:f4:18:1a:34:38:22:51:f3:58:60:92:7f:3f:60:
         63:17:c9:1a:ae:ce:b2:73:1e:f0:d1:93:fb:5b:2c:1e:66:ba:
         55:fc:fd:b8:0c:8a:06:64:0b:6f:85:08:34:8c:32:e8:65:1e:
         b7:d1:b9:99:ba:f5:6b:16:7d:51:a5:3b:71:ca:80:7d:9f:db:
         3c:56:ff:95:01:ea:0b:d2:da:c4:64:1d:6d:56:85:23:d1:ec:
         5a:b9:c0:bd:35:41:f7:fe:58:f0:71:60:da:08:58:1d:7a:54:
         19:69:30:4d:5f:35:8b:4c:be:e0:23:3b:5a:08:6c:00:2b:26:
         f0:0f:32:81:37:84:45:06:db:be:cf:8d:89:c3:5d:b1:89:4c:
         fc:bd:65:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzMyMjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhFOEFBOUMwQzIyNUVE
RjU4MzBDRDA1NUM2Nzk1QzU0MkY4QzgwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRadWk3IqdBLfhINpzxDSl8920xpTqCSzkNoIErJ5YLvpf/U4r
0BU2kZqJOTGNjY8Zp69eHWmxHCJ17+ts1yuRFY1qAX8NsC3Q9exs/gYn6MRFDY5j
ZJeA9F7M+Z0hKYlS86k6pVCsQDYKuVZU3t5yVRTUIh/sTWF6Cn5YXKscrhoJdrpG
fcfi8DAt4H5XqwlGZz3ZwpNrBHSkCGWz/GMGfcjNI61rQmh8MAVda8V1SvE2lN5F
32sHJ3a0kJrmbrQxa7mi95FfFEOdUGmzXNeGJz0wHnmQVN53GXPLL6TnBQKy7tgj
szMaeVn8PFP8pzbQMgNPGttb5rk2HHCZOFExAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUjoqpwMIl7fWDDNBVxnlcVC+MgCgwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9qb3Fwd01JbDdmV0RETkJWeG5sY1ZDLU1nQ2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7EwDQYJKoZIhvcNAQELBQADggEBAKSlPxNA29Wg+8LsbFL4
y1RzKDP5Vt0PZHnLe6goVy7ryLPUF6qFEa2FFYi85X521m9DdVWnZo99JdNBM553
Ro9Pp9jCb91wD2JKkTpsC4cQq+vgYE64CCZII+HrwgeGbtkXNRhEiCPgcNO0vbnS
uc/0GBo0OCJR81hgkn8/YGMXyRquzrJzHvDRk/tbLB5mulX8/bgMigZkC2+FCDSM
MuhlHrfRuZm69WsWfVGlO3HKgH2f2zxW/5UB6gvS2sRkHW1WhSPR7Fq5wL01Qff+
WPBxYNoIWB16VBlpME1fNYtMvuAjO1oIbAArJvAPMoE3hEUG277PjYnDXbGJTPy9
ZYE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org